API Reference

Every endpoint in this reference lives under https://api.legal.usecroma.com and is authenticated with a bearer API key. Pick an endpoint from the sidebar to see its parameters, response schema, an example, and a “try it” playground.

​

Endpoints

​

Conventions

• Auth: Authorization: Bearer <key> on every endpoint. See Authentication.
• Read endpoints are GET with filters as query parameters; only exports are a POST with a JSON body.
• Success: responses wrap the payload under data: { "data": … }. Lists add next_cursor and has_more (or total).
• Errors: { "error": { "type", "code", "message" } } with a non-2xx status. See Errors.
• No match: an empty list is a 200, not a 404. Only the single-case endpoints return 404, when the id or radicado isn’t in your organization.
• Field names are snake_case; dates are ISO 8601 in UTC; ids are UUIDs, and processes also accept their radicado.
• Rate limits: reported via X-RateLimit-* response headers. See Rate limits.
• Scoping: every response is limited to the organization that owns the key. There is no parameter to choose another organization.